CVE-2025-23089: Node.js EOL CVEs: CVE-2025-23087, CVE-2025-23088, CVE-2025-23089
Published Jan 22, 2025
·Updated
Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities
Affected Software
1 affected component
OpenJS Foundation Node.js
Event History
Jan 22, 2025
CVE Published
via MITRE·01:11 AM
Rejected
via MITRE·01:11 AM
Data Sourced
via NVD·02:15 AM
Description
Mar 1, 2025
Rejected
via MITRE·01:57 AM
Rejected
via NVD·03:15 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-23089?
CVE-2025-23089 poses a critical risk due to the lack of support and security updates for End-of-Life versions of Node.js.
2
How do I fix CVE-2025-23089?
To fix CVE-2025-23089, you should upgrade to a supported version of Node.js that is actively maintained.
3
What are the risks of using EOL versions of Node.js as per CVE-2025-23089?
Using EOL versions of Node.js exposes systems to unpatched vulnerabilities and potential security breaches.
4
Which versions of Node.js are affected by CVE-2025-23089?
CVE-2025-23089 affects all End-of-Life versions of Node.js that are no longer receiving updates.
5
How can I determine if my Node.js version is EOL according to CVE-2025-23089?
You can check the Node.js official website or use version management tools to identify if your version is classified as EOL.